Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa
File:                     59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa (raw, json)
Hash identifier:          SY8+nGd5K4VdqIvDZKxe01D+URe2pHzbh3gftq5RLfQ=
Subject key identifier:   24:DC:73:56:AE:B8:F7:9F:1A:A7:79:E5:65:F2:E2:69:C3:7C:BB:91
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285847B696BB92E52E94018F0AE180
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     16417
IP address blocks:        139.138.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:bb:92:e5:2e:94:01:8f:0a:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=70df8916-1137-406d-965b-10067883a3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3e:24:f9:8f:15:31:81:1e:a0:24:db:7a:0f:
                    5b:8d:81:ba:b2:0b:78:37:b8:eb:cd:1b:91:ea:7b:
                    78:59:c5:29:3a:77:aa:cf:7e:b6:0c:a7:f1:52:c1:
                    20:22:38:5d:21:5c:20:b9:af:55:0e:d8:c5:15:3d:
                    29:45:3d:d9:a3:97:64:f2:4c:ac:fc:b4:58:9e:8e:
                    8e:d0:d2:b5:8d:92:2b:23:16:43:7d:70:f7:ff:7f:
                    89:b0:00:31:ce:48:b5:ce:26:cc:56:0b:c6:03:4d:
                    90:49:e5:b7:7c:40:97:fe:ca:70:11:ba:40:20:f5:
                    d9:f8:99:4d:e2:8b:d7:58:f7:d2:48:93:fc:57:af:
                    7c:57:e6:42:9c:8a:a7:3d:4b:90:08:f2:95:e3:69:
                    10:b3:7e:89:fb:6d:4d:6a:9b:39:70:18:3c:64:d3:
                    18:1e:84:a5:bb:81:69:d5:0c:89:5e:82:59:f9:92:
                    b7:e0:0e:a3:44:5a:e8:26:26:c4:3b:bf:1d:a2:a2:
                    0f:80:83:d0:d3:f3:06:d0:2d:41:86:1a:87:bf:9b:
                    c8:68:81:43:4e:22:96:03:c2:d1:3c:08:13:8a:5e:
                    24:bb:ac:71:81:ed:77:fb:60:25:be:f0:b6:fe:62:
                    a3:39:4a:63:42:58:b3:a5:78:cc:34:64:56:c7:a5:
                    84:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DC:73:56:AE:B8:F7:9F:1A:A7:79:E5:65:F2:E2:69:C3:7C:BB:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/59eddd7c-657a-3cc0-85bf-3c152be6b72a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:45:1d:5c:75:ac:3a:a7:92:ae:39:a0:e7:1a:a0:b2:a9:7e:
         50:1f:20:24:40:ac:a6:fc:82:a0:69:58:12:39:52:b4:0c:17:
         05:28:8c:24:bd:56:c6:31:17:9b:12:42:28:0c:09:2a:d9:79:
         e0:d5:64:ec:dd:37:74:ee:c3:22:61:7b:e1:78:30:44:4f:9b:
         9d:69:bf:76:73:6f:3d:2a:ce:0f:ed:17:7e:9b:b4:af:c8:c9:
         0d:80:76:c1:0f:e8:d1:55:7f:b4:51:a7:7e:9b:83:53:c3:20:
         60:ae:6f:9a:0f:73:e3:c4:dc:91:e3:19:00:77:4d:dc:ae:bf:
         b7:97:0f:0a:91:78:8b:12:be:b1:36:a2:a6:89:78:12:b2:5b:
         1b:a1:72:0b:3e:c8:e7:60:b9:13:1f:be:3d:f7:55:85:de:61:
         98:96:8d:d9:2c:fd:9b:b7:84:30:a5:58:40:2d:bc:22:08:a5:
         40:41:f1:f0:3c:36:3f:2e:54:3f:b4:b4:38:9c:a9:d8:81:71:
         83:b9:d8:23:8b:8e:74:07:7b:33:1c:00:55:47:41:49:a3:9d:
         83:d6:9f:89:f8:51:99:5a:c5:c7:b6:9f:8c:19:05:2d:8d:cc:
         99:a5:f4:73:5d:05:d7:12:6c:82:ab:51:e1:88:33:05:45:cf:
         ab:b1:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org